https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 07:03:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-23234 cnvd-2020-23234 https://cve.radiocsirt.org/vuln/cnvd-2020-23234 https://cve.radiocsirt.org/vuln/euvd-2026-38248 EUVD-2026-38248 https://cve.radiocsirt.org/vuln/euvd-2026-38248 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8143 <p>An Open Redirect vulnerability was discovered in Revive Adserver version &lt; 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.</p> <p>An Open Redirect vulnerability was discovered in Revive Adserver version &lt; 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8143 https://cve.radiocsirt.org/vuln/ghsa-3pgg-7mmh-564c <p>An Open Redirect vulnerability was discovered in Revive Adserver version &lt; 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.</p> <p>An Open Redirect vulnerability was discovered in Revive Adserver version &lt; 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-3pgg-7mmh-564c https://cve.radiocsirt.org/vuln/gsd-2020-8143 gsd-2020-8143 https://cve.radiocsirt.org/vuln/gsd-2020-8143